Thomas Peetz
51 lines
1.5 KiB
Docker
51 lines
1.5 KiB
Docker
## ------------------------------- Builder Stage ------------------------------ ##
|
|
FROM python:3.13-bookworm AS builder
|
|
|
|
RUN apt-get update && apt-get install --no-install-recommends -y build-essential && \
|
|
apt-get clean && rm -rf /var/lib/apt/lists/*
|
|
|
|
# Download the latest installer, install it and then remove it
|
|
ADD https://astral.sh/uv/install.sh /install.sh
|
|
RUN chmod -R 655 /install.sh && /install.sh && rm /install.sh
|
|
|
|
# Set up the UV environment path correctly
|
|
ENV PATH="/root/.local/bin:${PATH}"
|
|
|
|
WORKDIR /app
|
|
|
|
COPY ./pyproject.toml .
|
|
|
|
RUN uv sync
|
|
|
|
# ------------------------------- Production Stage ------------------------------ ##
|
|
FROM python:3.13-slim-bookworm AS production
|
|
|
|
# The following secrets are available during build time
|
|
#RUN --mount=type=secret,id=DB_PASSWORD \
|
|
# --mount=type=secret,id=DB_USER \
|
|
# --mount=type=secret,id=DB_NAME \
|
|
# --mount=type=secret,id=DB_HOST \
|
|
# --mount=type=secret,id=DB_PORT \
|
|
# DB_PASSWORD=/run/secrets/DB_PASSWORD \
|
|
# DB_USER=$(cat /run/secrets/DB_USER) \
|
|
# DB_NAME=$(cat /run/secrets/DB_NAME) \
|
|
# DB_HOST=$(cat /run/secrets/DB_HOST) \
|
|
# DB_PORT=$(cat /run/secrets/DB_PORT)
|
|
|
|
#RUN --mount=type=secret,id=secret-key,target=secrets.json
|
|
|
|
RUN useradd --create-home appuser
|
|
USER appuser
|
|
|
|
WORKDIR /app
|
|
|
|
COPY /src src
|
|
COPY --from=builder /app/.venv .venv
|
|
|
|
# Set up environment variables for production
|
|
ENV PATH="/app/.venv/bin:$PATH"
|
|
|
|
# Start the application with Uvicorn in production mode, using environment variable references
|
|
CMD ["python", "src/main.py", "--log-level", "info"]
|
|
|